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DATA PROCESSING APPARATUS AND METHOD FOR ENCRYPTION OR 
DECRYPTION OF COMMUNICATION DATA 

BACKGROUND OF THE INVENTION 
5 Field of the Invention 

The present invention relates to a data processing 
apparatus and method for encryption or decryption of 
communication data - 
Related Background Art 

10 It is necessary for an information apparatus 

connected to a network to prevent data sniffing and 
wiretapping by third parties. In order to prevent such 
illegal acts, data ciphering is very effective. 

As a cryptosystem becomes more complicated, it 

15 takes a longer time to perform a cipher process. For 
example, in transmitting print data encrypted at a 
personal computer via a network and printing decrypted 
data with a printer, the total printing speed is 
lowered because of encryption and decryption processes. 

20 

SUMMARY OF THE INVENTION 

It is an object of the invention to solve the 
above problem and provide a data processing apparatus 
and method capable of shortening a time required for 
25 encryption and decryption while the data security is 
retained . 

According to one aspect, the present invention 
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which achieves these objectives relates to a data 
processing apparatus comprising: input means for 
inputting data to be transmitted; extracting means for 
extracting a particular portion of the data input from 
5 the input means; encrypting means for encrypting the 
particular portion extracted by the extracting means; 
and transmitting means for transmitting the particular 
portion encrypted by said encrypting means and a 
remaining portion not extracted by the extracting 
10 means. 

According to another aspect, the present invention 
which achieves these objectives relates to a data 
processing apparatus comprising: receiving means for 
receiving data; extracting means for extracting an 

15 encrypted portion from data received by the receiving 
means; analyzing means for analyzing the extracted 
portion extracted by the extracting means; and output 
means for outputting the portion analyzed by the 
analyzing means and a remaining portion not extracted 

20 by the extracting means. 

According to still another aspect, the present 
invention which achieves these objectives relates to a 
data processing method comprising: an input step of 
inputting data to be transmitted; an extracting step of 

25 extracting a particular portion of the data input at 
the input step; an encrypting step of encrypting the 
particular portion extracted at the extracting step: 
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and a transmitting step of transmitting the particular 
portion encrypted at the encrypting step and a 
remaining portion not extracted at the extracting step. 
According to yet another aspect, the present 
5 invention which achieves these objectives relates to a 
data processing method comprising: a receiving step of 
receiving data; an extracting step of extracting an 
encrypted portion from data received at the receiving 
step; an analyzing step of analyzing the extracted 

10 portion extracted at the extracting step; and an output 
step of outputting the portion analyzed at the 
analyzing step and a remaining portion not extracted at 
the extracting step * 

According to another aspect, the present invention 

15 which achieves these objectives relates to a computer 
readable storage medium storing a data processing 
program for controlling a computer to perform data 
processing, said program comprising codes for causing 
the computer to perform: an input step of inputting 

20 data to be transmitted; an extracting step of 

extracting a particular portion of the data input at 
the input step; an encrypting step of encrypting the 
particular portion extracted at the extracting step: 
and a transmitting step of transmitting the particular 

25 portion encrypted at the encrypting step and a 

remaining portion not extracted at the extracting step. 
According to another aspect, the present invention 
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which achieves these objectives relates to a computer 
readable storage medium storing a data processing 
program for controlling a computer to perform data 
processing, said program comprising codes for causing 
5 the computer to perform: a receiving step of receiving 
data; an extracting step of extracting an encrypted 
portion from data received at the receiving step; an 
analyzing step of analyzing the extracted portion 
extracted at the extracting step; and an output step of 
10 outputting the portion analyzed at the analyzing step 

and a remaining portion not extracted at the extracting 
step . 

Other objectives and advantages besides those 
discussed above shall be apparent to those skilled in 

15 the art from the description of preferred embodiments 
of the invention which follows- In the description, 
reference is made to accompanying drawings, which form 
a part of the invention, and which illustrates an 
example of the invention. Such example, however, is 

20 not exhaustive of the various embodiments of the 
invention, and therefore reference is made to the 
claims which follow the description for determining the 
scope of the invention. 



25 



BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram illustrating a first 
embodiment of the invention. 
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Fig. 2 is a block diagram illustrating the first 
embodiment of the invention. 

Fig. 3 is a flow chart illustrating an example of 
the operation on an encryption side. 
5 Fig. 4 is a flow chart illustrating an example of 

the operation on a decryption side. 

Fig. 5 is a block diagram illustrating a second 
embodiment of the invention. 

Fig. 6 is a diagram illustrating the structure of 
10 image data according to the second embodiment of the 
invention. 

Fig. 7 is a flow chart illustrating an example of 
the operation according to the second embodiment of the 
invention. 

15 Fig. 8 is a block diagram illustrating a third 

embodiment of the invention. 

Figs. 9A, 9B and 9C illustrate the structure of 
voice data according to the third embodiment of the 
invention . 

20 Fig. 10 is a flow chart illustrating an example of 

the operation according to the third embodiment of the 
invention. 

Fig. 11 is a block diagram illustrating a fourth 
embodiment of the invention. 
25 Fig. 12 is a flow chart illustrating an example of 

the operation according to the fourth embodiment of the 
invention. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
< First Embodiment > 

Figs. 1 and 3 illustrate the first embodiment of 
the invention. In this embodiment, encryption of print 
5 data to be transmitted from a printer will be 

described. In this example, of print data, only 
control codes which determine the fundamental operation 
of a printer are encrypted. The control codes are 
important codes which determine the analysis method of 

10 data which follows the preceding control code. If the 
control codes are encrypted, the analysis method for 
following data can be kept in secret, and sufficient 
cipher security can be expected even if all print data 
is not encrypted. 

15 With reference to Fig. 1, the structure of an 

encryption apparatus will be described. In Fig. 1, 
reference numeral 1 represents a print data input part 
for inputting print data. Reference numeral 2 
represents an input buffer for tentatively storing 

20 print data. Reference numeral 3 represents a data 

analysis/extracting part for analyzing the contents of 
print data stored in the input buffer 2 and extracting 
control codes to be encrypted. Reference numeral 4 
represents an encrypting part for encrypting the 

25 control codes extracted by the data analysis/extracting 
part 3 . Reference numeral 5 represents an output 
buffer for tentatively storing encrypted data and 
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remaining data not encrypted, as the data to be 
transmitted. Reference numeral 6 represents a 
transmitting part for transmitting data in the output 
buffer 5. 

5 With reference to Fig. 2, the structure on a 

decryption side will be described. In Fig. 2, 
reference numeral 21 represents a receiving part for 
receiving encrypted communication data. Reference 
numeral 22 represents an input buffer for tentatively 
10 storing received data to be decrypted. Reference 
numeral 23 represents an extracting part for 
discriminating and extracting encrypted data in the 
data stored in the input buffer 22. Reference numeral 

24 represents a decrypting part for decrypting the data 
15 extracted by the extracting part 23. Reference numeral 

25 represents an output buffer for tentatively storing 
data to be printed. Reference numeral 26 represents an 
output part for outputting data stored in the output 
buffer 25. 

20 Fig. 3 is a flow chart illustrating an example of 

the operation to be executed on the encryption side. 
Print data input from the print data input part 1 is 
tentatively stored in the input buffer (S301), and the 
contents of the data are analyzed by the data 

25 analysis/extracting part 3 by a discrimination method 
such as pattern matching (S302). In accordance with 
the data analysis result, it is checked whether or not 
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the data is the printer control code (S303). A part of 
the data recognized as the printer control code by the 
data analysis/extracting part 3 is encrypted by the 
encrypting part 4 ( S304 ) and sent to the output buffer 
5 5 (S305). Data except the printer control code is not 
subjected to the encryption process but is directly 
sent to the output buffer 5 in which it is synthesized 
with the encrypted control codes (S306). Thereafter, 
the contents in the output buffer 5 are transmitted 

10 from the transmitting part 6 (S307). 

Fig. 4 is a flow chart illustrating an example of 
the operation on the decryption side. Encrypted data 
and not encrypted data received by the receiving part 
21 are tentatively stored in the input buffer 22 

15 (S401), the contents of the encrypted data in the input 

buffer 22 are analyzed (S402), and in accordance with 
the data analysis result, the extracting part 23 
discriminates between the encrypted data and the data 
not encrypted ( S403 ) . The encrypted data is extracted 

20 by the extracting part 23, decrypted by the decrypting 
part 24 by a decrypting process (S404) and output to 
the output buffer (S405). The data not encrypted is 
directly sent to the output buffer 25 in which it is 
synthesized with the decrypted control codes without 

25 performing decrypting process (S406). Thereafter, the 
contents in the output buffer 25 are output from the 
output part 26 to a printer or the like which analyzes 
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the print; codes and prints the print data. 

In this embodiment, not all the communication data 
is encrypted, but only the important portion thereof is 
encrypted. It is therefore possible to shorten the 
5 time required for ciphering communication data. 
< Second Embodiment > 

Fig. 5 illustrates the second embodiment of the 
invention. In this example, image data is encrypted. 
Only those image data having a high weight portion of 

10 image information representation is encrypted. It is 

assumed that each pixel of image data is represented by 
R, G and B primary three colors each having eight bits, 
totalling in 24 bits per pixel. 

In Fig. 5, reference numeral 61 represents an 

15 image data input part for inputting image data. 

Reference numeral 62 represents an input buffer for 
tentatively storing image data. Reference numeral 63 
represents a data extracting part for extracting upper 
four bits of each R, G and B data stored in the input 

20 buffer 62. Reference numeral 64 represents an 

encrypting part for encrypting the data extracted by 
the data extracting part 63. Reference numeral 65 
represents an output buffer for tentatively storing 
data to be transmitted. Reference numeral 66 

25 represents a transmitting part for transmitting data in 
the output buffer 65. 

Next, the structure of image data will be 
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described with reference to Fig. 6. As described 
above, each pixel of image data is represented by R, G 
and B primary three colors each having eight bits, 
totalling in 24 bits per pixel. Image data having a 
5 high weight portion of image information representation 
is upper bits. For example, if the upper four bits of 
eight bits of each R, G and B data are lost, it is 
almost impossible to recover the original correct image 
data. Therefore, if the upper four bits only are 

10 encrypted, the distinctive ciphering effects can be 

expected even if all the image data is not encrypted - 

Fig. 7 is a flow chart illustrating an example, of 
the operation according to this embodiment. Image data 
input from the image data input part 61 is tentatively 

15 stored in the input buffer 62 (S701), and thereafter 
analyzed by the extracting part 63 (S702). Only the 
upper four bits of each of R, G and B three colors are 
extracted by the extracting part ( S703 ) , the upper four 
bits are encrypted by the encrypting part 64 ( S704 ) and 

20 sent to the output buffer 65 (S705). The remaining 
data of lower four bits is not encrypted, but is 
directly sent to the output buffer 65 (S706). 
Thereafter, the contents in the output buffer 65 are 
transmitted from the transmitting part 66 ( S707 ) . 

25 <Third Embodiment> 

Fig. 8 illustrates the third embodiment of the 
invention. In this embodiment, voice data is 
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encrypted. It: is assumed that: the voice data is 
constituted of each sampling data of 16 bits subjected 
to pulse code modulation (PCM). 

In Fig. 8, reference numeral 91 represents a voice 
5 data input part for inputting voice data. Reference 
numeral 92 represents an input buffer for tentatively 
storing voice data. Reference numeral 93 represents an 
extracting part for extracting four bits including 
15th, 11th, 7th and 3rd bits from the data stored in 

10 the input buffer 92. Reference numeral 94 represents 

an encrypting part for encrypting the data extracted by 
the extracting part 93. Reference numeral 95 
represents an output buffer for tentatively storing 
data to be transmitted. Reference numeral 96 

15 represents a transmitting part for transmitting data in 
the output buffer 95. 

With reference to Figs. 9A to 9C, the structure of 
voice data will be described. Voice data is 
constituted of each sampling data of 16 bits subjected 

20 to PCM as shown in Fig. 9C. Voice data having a high 
weight portion of voice information representation is 
upper bits. Therefore, if the upper bits only are 
encrypted, it is almost impossible to recover original 
correct voice information. However, voice data having 

25 a low record level has a high possibility that the 

upper bits thereof are not used and they may become 0. 
If the third party taps this voice data and the 
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encrypted unknown bits are masked to 0, the voice data 
at the low record level can be easily recovered. In 
order to avoid this, in this embodiment, for example, a 
voice waveform such as shown in Fig. 9 A is encrypted by 
5 extracting discrete four bits including 15th, 11th, 7th 
and 3rd bits from all 16 bits. 

Fig. 10 is a flow chart illustrating an example of 
the operation according to this embodiment. Voice data 
input form the input part 91 is tentatively stored in 

10 the input buffer 92 (S1001). Thereafter, the 

extracting part 93 analyzes the data (S1002), extracts 
four bits including 15th, 11th, 7th and 3rd bits 
(S1003), and the encrypting part 94 encrypts the four 
bits (S1004) and sends the encrypted bits to the output 

15 buffer 95 (S1005). The remaining 12-bit data is not 

encrypted but is directly sent to the output buffer 9 5 

(51006) . Thereafter, the contents of the output buffer 
95 are transmitted from the transmitting part 96 

(51007) . 

20 <Fourth Embodiment > 

Fig. 11 illustrates the fourth embodiment of the 
invention. In this embodiment, compressed data is 
encrypted. One of widely used data compression methods 
is to form a conversion table using Huffman codes 

25 assigned a smaller number of bits in the order from a 
pattern having a higher use frequency and to execute 
data conversion/compression by using this table. When 
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compressed data is to be expanded, the same conversion 
table is used- In this embodiment, data is compressed 
and only the data corresponding to the conversion table 
is encrypted to make it difficult to recover the 
5 original data from the tapped data, thus realizing the 
effects equivalent to those when all the data is 
encrypted . 

In Fig, 11, reference numeral 111 represents a 
data input part for inputting data. Reference numeral 

10 112 represents an input buffer for tentatively storing 
input data input by data input part 111, Reference 
numeral 113 represents a data distribution analyzing 
part for analyzing the distribution of patterns used in 
the data stored in the input buffer 112. Reference 

15 numeral 114 represents a conversion table generating 
part for generating a compression conversion table in 
accordance with the analysis result of the data 
distribution analyzing part 113. Reference numeral 115 
represents a data conversion compressing part for 

20 compressing input data by using the conversion table 

generated by the conversion table generating part 114. 
Reference numeral 116 represents a conversion table 
encrypting part for encrypting the conversion table 
generated by the conversion table generating part 114. 

25 Reference numeral 117 represents an output buffer for 
storing the compressed data generated by the data 
conversion compressing part 115 and the table generated 
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by the conversion table encrypting part 116. Reference 
numeral 118 represents a transmitting part for 
transmitting the contents in the output buffer 117. 

Fig. 12 is a flow chart illustrating an example of 
5 the operation according to this embodiment. Data input 
form the input part 111 is tentatively stored in the 
input buffer 112 (S1201). Thereafter, the distribution 
of patterns in the data is analyzed by the data 
analyzing part 113 (S1202). In accordance with the 

10 analysis result, the compression conversion table is 
generated by the conversion table generating part 
(S1203). This conversion table is encrypted by the 
conversion table encrypting part 116 (S1204) and sent 
to the output buffer 117 (S1205). The data conversion 

15 compressing part 115 compresses the input data by using 
the conversion table (S1206), and the compressed data 
is directly supplied to the output buffer 117 without 
being encrypted (S1207). After all data in the output 
buffer 117 is processed completely (S1208), the 

20 contents of the output buffer 117 are transmitted from 
the transmitting part 118 (S1209). 

As described above, according to the embodiments, 
all the communication data is not encrypted but only 
the important data among the communication data is 

25 encrypted to shorten the time required for the total 
cipher process . 

The invention is applicable not only to 
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communications between different user terminals but 
also to communications between a data processing 
apparatus such as a computer and a storage device such 
as a hard disk, i.e., to data read/write. 
5 The invention is applicable to a system 

constituted of a plurality of apparatuses (e.g., a 
computer, interface units, a display and the like) or 
to a single apparatus, so long as the functions of each 
of the embodiments can be realized. 

10 The scope of the invention includes the case 

wherein a system or apparatus connected to various 
devices which realize the functions of each of the 
embodiments, is supplied with software program codes 
realizing the functions of each embodiment and a 

15 computer (CPU or MPU) of the system or apparatus reads 
and executes the programs code to operate the devices . 
In this case, the program codes themselves stored in a 
storage medium realize the functions of each 
embodiment. Therefore, means for supplying the program 

20 codes to the computer, e.g., a storage medium storing 
such program codes, constitutes the present invention. 

The storage medium for storing such program codes 
may be a floppy disk, a hard disk, an optical disk, a 
magnetooptical disk, a CD-ROM, a CD-R, a magnetic tape, 

25 a nonvolatile memory card, a ROM or the like. 

It is obvious that the scope of the invention also 
contains not only the case wherein the functions of 
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each embodiment: can be realized by executing the 
program codes read by a computer, but also the case 
wherein the functions of each embodiment can be 
realized by an operating system (OS) running on the 
5 computer or by other application software, in 
accordance with the program codes. 

It is obvious that the scope of the invention also 
contains the case wherein the functions of each 
embodiment can be realized by writing the program codes 

10 read from the storage medium into a memory of a 

function expansion board inserted into a computer or of 
a function expansion unit connected to the computer, 
and thereafter by executing a portion or the whole of 
actual processes by a CPU or the like of the function 

15 expansion board or function expansion unit. 

If the invention is to be applied to the storage 
medium, this storage medium stores therein program 
codes corresponding to the operation described with 
each of the flow charts described above. 

20 Although the present invention has been described 

in its preferred form with a certain degree of 
particularity, many apparently widely different 
embodiments of the invention can be made without 
departing from the spirit and the scope thereof. It is 

25 to be understood that the invention is not limited to 
the specific embodiments thereof except as defined in 
the appended claims. 



